Use RELRO hardening on all binaries
This commit is contained in:
parent
7c23db2b2b
commit
adb69c78bc
@ -67,7 +67,7 @@
|
|||||||
|
|
||||||
Name: community-mysql
|
Name: community-mysql
|
||||||
Version: 8.0.17
|
Version: 8.0.17
|
||||||
Release: 1%{?with_debug:.debug}%{?dist}
|
Release: 2%{?with_debug:.debug}%{?dist}
|
||||||
Summary: MySQL client programs and shared libraries
|
Summary: MySQL client programs and shared libraries
|
||||||
URL: http://www.mysql.com
|
URL: http://www.mysql.com
|
||||||
|
|
||||||
@ -386,6 +386,8 @@ cp %{SOURCE2} %{SOURCE3} %{SOURCE10} %{SOURCE11} %{SOURCE12} \
|
|||||||
%{SOURCE14} %{SOURCE15} %{SOURCE17} %{SOURCE18} %{SOURCE31} scripts
|
%{SOURCE14} %{SOURCE15} %{SOURCE17} %{SOURCE18} %{SOURCE31} scripts
|
||||||
|
|
||||||
%build
|
%build
|
||||||
|
%{set_build_flags}
|
||||||
|
|
||||||
# fail quickly and obviously if user tries to build as root
|
# fail quickly and obviously if user tries to build as root
|
||||||
%if %runselftest
|
%if %runselftest
|
||||||
if [ x"$(id -u)" = "x0" ]; then
|
if [ x"$(id -u)" = "x0" ]; then
|
||||||
@ -445,10 +447,13 @@ cmake .. \
|
|||||||
-DREPRODUCIBLE_BUILD=OFF \
|
-DREPRODUCIBLE_BUILD=OFF \
|
||||||
-DCMAKE_C_FLAGS="%{optflags}%{?with_debug: -fno-strict-overflow -Wno-unused-result -Wno-unused-function -Wno-unused-but-set-variable}" \
|
-DCMAKE_C_FLAGS="%{optflags}%{?with_debug: -fno-strict-overflow -Wno-unused-result -Wno-unused-function -Wno-unused-but-set-variable}" \
|
||||||
-DCMAKE_CXX_FLAGS="%{optflags}%{?with_debug: -fno-strict-overflow -Wno-unused-result -Wno-unused-function -Wno-unused-but-set-variable}" \
|
-DCMAKE_CXX_FLAGS="%{optflags}%{?with_debug: -fno-strict-overflow -Wno-unused-result -Wno-unused-function -Wno-unused-but-set-variable}" \
|
||||||
|
-DCMAKE_EXE_LINKER_FLAGS="-pie %{build_ldflags}" \
|
||||||
%{?with_debug: -DWITH_DEBUG=1} \
|
%{?with_debug: -DWITH_DEBUG=1} \
|
||||||
%{?with_debug: -DMYSQL_MAINTAINER_MODE=0} \
|
%{?with_debug: -DMYSQL_MAINTAINER_MODE=0} \
|
||||||
-DTMPDIR=/var/tmp \
|
-DTMPDIR=/var/tmp \
|
||||||
-DWITH_MYSQLD_LDFLAGS="-pie -Wl,-z,relro,-z,now"
|
-DWITH_MYSQLD_LDFLAGS="%{build_ldflags}" \
|
||||||
|
-DCMAKE_C_LINK_FLAGS="%{build_ldflags}" \
|
||||||
|
-DCMAKE_CXX_LINK_FLAGS"%{build_ldflags}"
|
||||||
|
|
||||||
cmake .. -LAH
|
cmake .. -LAH
|
||||||
|
|
||||||
@ -789,6 +794,9 @@ fi
|
|||||||
%endif
|
%endif
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Mon Aug 19 2019 Michal Schorm <mschorm@redhat.com> - 8.0.17-2
|
||||||
|
- Use RELRO hardening on all binaries
|
||||||
|
|
||||||
* Wed Jul 31 2019 Lars Tangvald <lars.tangvald@oracle.com> - 8.0.17-1
|
* Wed Jul 31 2019 Lars Tangvald <lars.tangvald@oracle.com> - 8.0.17-1
|
||||||
- Update to MySQL 8.0.17
|
- Update to MySQL 8.0.17
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user